Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vXDtEnbawzlRG6ArhK2Nf7FU834.roa
File: vXDtEnbawzlRG6ArhK2Nf7FU834.roa (raw, json)
Hash identifier: 8+iAau34NEcoQ8E65IIyGiBpSIbUOXWgknETNwe5Xiw=
Subject key identifier: BD:70:ED:12:76:DA:C3:39:51:1B:A0:2B:84:AD:8D:7F:B1:54:F3:7E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 099D0D08
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vXDtEnbawzlRG6ArhK2Nf7FU834.roa
Signing time: Tue 05 Jul 2022 02:52:25 +0000
ROA not before: Tue 05 Jul 2022 02:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161287432 (0x99d0d08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 5 02:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd70ed1276dac339511ba02b84ad8d7fb154f37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:11:0c:5d:79:23:0e:7a:44:ba:e6:c2:6a:
a2:46:e8:00:4c:46:8a:71:0c:0c:fc:38:5d:6b:ad:
79:37:21:1c:17:2a:5b:a2:3d:01:79:fd:35:c2:4c:
c4:c9:4a:9d:1b:78:5c:45:27:94:e1:75:dd:9c:76:
43:3f:17:ad:e4:2d:81:1c:a3:95:8c:ab:c7:5b:df:
a1:41:b2:12:24:0b:84:2e:27:f5:62:b7:b0:8f:f8:
d3:b4:3d:e6:8e:61:81:b4:15:77:80:82:e3:0f:47:
dc:1b:b7:64:bb:c6:a5:6b:24:48:e5:9f:10:f0:82:
2f:cd:bc:53:55:f6:7b:91:89:4c:a6:87:dd:b3:45:
44:0e:e0:48:4b:41:ce:60:ee:0a:9f:39:0c:43:16:
4e:cc:74:6e:65:33:fe:ee:8f:d9:55:87:31:b5:e3:
4c:a1:c8:46:23:2c:96:48:36:53:1f:8e:48:06:cf:
b1:c3:6b:7c:be:c5:e9:7e:f0:1b:be:f9:54:ea:f7:
0c:6d:ea:59:56:37:74:64:fa:92:d8:31:8b:c1:33:
e5:a7:c4:fb:ca:5f:65:87:6f:59:99:ce:77:13:1d:
40:5b:8b:b7:cf:c9:14:f3:4f:77:66:67:32:81:00:
89:32:27:65:1b:64:27:8b:31:a0:aa:08:2a:dd:e5:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:70:ED:12:76:DA:C3:39:51:1B:A0:2B:84:AD:8D:7F:B1:54:F3:7E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vXDtEnbawzlRG6ArhK2Nf7FU834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
aa:cf:25:a9:fd:14:12:78:14:cc:4b:0c:eb:0d:7e:fa:8d:75:
4a:e2:39:d8:e9:df:11:29:1b:10:10:b6:53:5c:e6:90:55:d6:
54:89:d6:46:b2:45:14:1b:74:73:05:2d:d6:74:50:46:19:b2:
f1:7c:f6:4d:e9:c9:58:06:7f:98:17:62:18:e4:2b:19:e3:4c:
b1:3b:40:a1:be:2f:cc:78:43:1e:fc:87:e5:dc:39:79:c5:f5:
b6:83:49:37:d2:8a:14:fd:db:b5:17:86:f5:65:d5:db:c1:d4:
eb:2a:78:05:ae:ef:42:a6:50:bb:ba:b9:31:51:61:ce:05:e6:
d9:5b:50:98:ed:31:1f:50:e5:70:61:87:2b:60:73:9a:77:c9:
50:86:fc:f3:97:08:f0:f3:83:70:db:fd:4e:20:d1:37:2e:e2:
29:c2:27:57:2d:b0:8c:f9:ca:5a:b1:c7:54:34:9f:fb:f5:e1:
f6:63:be:29:21:2c:71:ea:57:9b:d9:eb:2a:f8:8d:b2:e1:76:
0e:e6:55:06:09:e7:ed:11:3a:6e:24:d0:e3:ba:b7:a8:3f:f7:
25:3f:84:bc:4f:99:b1:a4:31:e0:38:de:42:3b:2e:1e:82:38:
5f:3e:48:a4:18:41:d0:31:8a:36:c1:cf:c3:a8:ba:e7:50:94:
d7:b4:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org